Critical Vulnerability in Linux Kernel: HID Core Bypass Issue
Summary
CVE-2025-38494: In the Linux kernel, the following vulnerability has been resolved: HID: core: do not bypass hid_hw_raw_request hid_hw_raw_request() is actually useful to ensure the provided buffer and length are valid. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interactions. It is known for its stability, performance, and extensive hardware support. However, it is also susceptible to vulnerabilities that can compromise system integrity and security. The specific vulnerability identified as CVE-2025-38494 affects the HID (Human Interface Device) subsystem, which manages input devices such as keyboards and mice.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the HID subsystem where the function hid_hw_raw_request() was improperly called in low-level transport driver functions. This bypassed critical checks for buffer validity and length, allowing invalid parameters to be used. Such exploitation could lead to undefined behavior, system crashes, or potential remote code execution, posing significant risks to system security.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid using the affected HID devices until the kernel is updated. Additionally, restricting access to the affected subsystem may mitigate immediate risks.
Conclusion
The CVE-2025-38494 vulnerability in the Linux kernel's HID subsystem poses significant risks due to improper buffer checks. Users are strongly encouraged to update their systems to the latest patched version to ensure security and stability. Utilizing tools like Vulert can help in monitoring vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38494 is a vulnerability in the Linux kernel's HID subsystem that allows bypassing of buffer checks, potentially leading to system instability or security breaches.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Exploitation of this vulnerability could lead to system crashes, undefined behavior, or even remote code execution, compromising the security and integrity of the system.
Yes, a patch has been released for the affected versions of the Linux kernel. Users are advised to update to the latest version to mitigate the risk.
If immediate updates are not possible, consider restricting access to the affected HID devices and monitoring system behavior closely until a patch can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
